Which of the following statements, if any, is/are correct (1) Internal auditors should report to the finance director as they understand internal controls and are best placed to implement any recommendations in a timely manner (2) Companies are not required to establish and maintain an internal audit function